HttpOnly

A cookie flag that forbids JavaScript from reading the cookie, so an XSS cannot simply steal the session.

Learn it hands-on

• Cross-Site Scripting (XSS) Medium